How Do I Remove a User's Ambition Access in our Identity Provider (IdP)?
Last updated: November 15, 2026
When your organization uses single sign-on (SSO), every login to Ambition goes through your identity provider (IdP), so removing someone from the Ambition app in your IdP stops them from logging in. Their Ambition account stays active and counts towards your license limit until you deactivate their Ambition account.
Required permissions:
Admin access in your IdP is required to remove a user from the Ambition app.
The Users: Delete: Can Delete All Users permission is required to deactivate any user.
The Users: Delete: Can Delete Subordinate Users permission is required to deactivate the users you manage.
The Users: Delete: Can Delete Users Created By permission is required to deactivate users you created.
Remove the User from Ambition in Your IdP
Open the Ambition SAML app in your IdP.
Unassign the user from the app, or remove them from any group that's assigned to it.
Deactivate the User's Ambition Account
Head to Admin --> People --> Users and find the user with the search bar.
Click on the ellipses icon in the user's row, then select Deactivate.
In the Deactivate User pop-up, type I UNDERSTAND and click on Deactivate.
Note:
Removing a user in your IdP will not sign them out if they're already logged in to Ambition. Deactivating their account will sign them out the next time they load a page.